8139d5e07d6f8842b3ceda89f0db72b42e395f4fdc09ce7b7c62137b4f411112

Classification: Malicious

8139d5e07d6f8842b3ceda89f0db72b42e395f4fdc09ce7b7c62137b4f411112 is a malicious file sample. Linked to Agent Tesla malware. Detected by 33 antivirus engines.

Detection summary

  • 33 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: AGENT TESLA (S0331)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 16:45:03 2026-09-02 16:45:03 malicious-activity
AgentTesla MalwareBazaar Abuse.ch 2024-06-14 19:16:00 2024-06-14 19:16:00 malicious-activity S0331 Agent Tesla

Tags

evasive

Sample information

Filenames
8139d5e07d6f8842b3ceda89f0db72b42e395f4fdc09ce7b7c62137b4f411112, RFQ-to MSR # 9969 - Buyer ID #(3071917) - 1.exe
File type
application/x-dosexec
MD5
6585d907b45b48cdd93d13de35bde89d
SHA-1
8a5e5461005041f9bd4cb57beb9173a22c196ec6
SHA-256
8139d5e07d6f8842b3ceda89f0db72b42e395f4fdc09ce7b7c62137b4f411112
First indexed
2024-06-14 20:23:09
Last updated
2026-09-02 16:45:03

Antivirus detections

EngineDetection
APEXMalicious
AVGWin32:PWSX-gen [Trj]
AhnLab-V3Trojan/Win.Taskun.C5640915
AlibabaTrojan:MSIL/Taskun.342f8e62
AvastWin32:PWSX-gen [Trj]
BkavW32.AIDetectMalware.CS
ClamAVWin.Packed.Msilheracles-10020638-0
CrowdStrikewin/malicious_confidence_100% (W)
DeepInstinctMALICIOUS
DrWebTrojan.PackedNET.2548
ESET-NOD32a variant of MSIL/GenKryptik.GYSL
Elasticmalicious (high confidence)
FortinetMSIL/Remcos.GWMJE!tr
GoogleDetected
GridinsoftTrojan.Win32.Kryptik.sa
IkarusTrojan.MSIL.Crypt
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
KingsoftMSIL.Trojan-PSW.Agensla.gen
LionicTrojan.Win32.Agensla.i!c
MaxSecureTrojan.Malware.300983.susgen
McAfeeArtemis!6585D907B45B
MicrosoftTrojan:MSIL/Taskun.AMAE!MTB
Paloaltogeneric.ml
RisingMalware.Obfus/[email protected] (RDM.MSIL2:8U1wXSn/AjChTzZZwJgHvg)
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.bc
SophosTroj/Krypt-ABH
SymantecScr.Malcode!gdn33
VBA32TrojanLoader.MSIL.DaVinci.Heur
VaristW32/MSIL_Kryptik.BYC.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.A
ZoneAlarmUDS:Trojan-PSW.MSIL.Agensla.gen

Network contacts

108.167.140.83

DNS requests

mail.adcconsultant.com